A centralized network management system includes a wireless controller system and a plurality of access points that are coupled together through a network. Each of the plurality of access points is configured to receive wireless traffic from user devices and determine whether flow session rules are available for the wireless traffic. If so, wireless traffic received by an access point that is part of a flow session is modified by that access point according to at least one flow session rule that was received from the wireless controller system and that is associated with the flow session to which that wireless traffic belongs. That modified wireless traffic is translated to modified wired traffic by the access point, and the access point then perform an action on the modified wired traffic according to the at least one flow session rule associated with the flow session.